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9. (Previously Presented) A method of accessing an internal network device on a 
protected network, the network including a security device, the method comprising: 

storing data addressed to the internal network device in an externa! proxy server; 
maintaining a proxy agent on the protected network, the proxy agent executing the 
steps of: 

polling the external proxy server for data addressed to the internal network device, 
where polling includes: 
connecting to the external proxy server to check for pending traffic; 
receiving a stream of spurious bytes from the external proxy server if there 

is nothing pending for the internal network device; 
receiving data from the external proxy server when the external proxy server 
has received data from a client; 
forwarding to the internal network device any data on the external proxy server and 

addressed to the internal network device; and 
forwarding to the external proxy server any data addressed to an external device in 
communication with the external proxy server 

10. (Original) The method of claim 9 further comprising polling the external 
proxy server at regular intervals. 

1 1 . (Original) The method of claim 9 further comprising communicating by the 
internal network device with the external proxy server using a first network protocol and the 
external network device communicates with the external proxy server using a second 
network protocol. 
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12. (Original) The method of claim 1 1 wherein data addressed to the Internal 
network device using the second network protocol is transmitted to the internal device using 
the first network protocol so that the second network protocol is carried to the internal 
network device inside the first network protocol. 

13. (Original) The method of claim 9 further including multiplexing multiple 
requests from the proxy agent to the external proxy server through the same connection- 

14. (Original) The method of claim 9 further including maintaining by the 
external proxy server of maps between local TCP/IP ports of the external proxy server and 
private IP addresses on the protected network, the maps being distinguished by an identity of 
the proxy agent used to access them. 

15. (Original) The method of claim 14 further including publishing by each proxy 
agent a list of addresses it can reach to the external proxy server, the external proxy server 
using this list to create a respective map between local ports and proxy agents. 

16. (Original) The method of claim 14 further including ensuring cookie delivery. 

17. (Canceled) 

18. (Original) The method of claim 9 wherein communication between the proxy 
agent and external proxy server is encrypted. 

19. (Original) The method of claim 18 wherein the data is encrypted using 
Secure Sockets Layer (SSL) for HTTP. 

20. (Original) The method of claim 19 wherein both the proxy agent and the 
external proxy server require X.509 certificates. 
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21 . (Original) The method of claim 9 further comprising rewriting cookies with 
unique identifiers to prevent inadvertent transmission of private information to an incorrect 
recipient on the protected network. 

22. (Original) The method of claim 9 further comprising providing network 
administrators control over the system including granting administrators the ability to allow 
and deny entry into the protected network on a per session basis. 

23. (Original) The method of claim 22 wherein access is conferred by granting a 
key with a predetermined life span. 
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